[NEC] [2.3.3] Delete "Some questions" / Virus spoofing this address

[list-replies@shirky.com]

Dear NEC subscribers,

Delete any mail from this list with "Some questions" in the Subject
line. It is a virus, spoofed from this address.

I awoke this morning to several hundred notifications from both
subscribers and anti-virus programs that a virus was using the
nec-admin address. I believe it is KLEZ, though I haven't taken it
apart to know for sure. 

NEC is sent ASCII only, from a Unix mailer. I will never send
executables, and the only binary data that will ever accompany NEC
mail will be images. In addition, valid NEC mail will have a version
number in the format [x.x] in the subject line.

I am sorry if the spoof caused any of you any difficulties. I am
talking to the system administrators of shirky.com to see if there's
anything we can do to prevent this in the future.

Thanks you, and sorry for the bother,

-clay